Pittsburgh, PA
Senior Security Solutions Architect
RESPONSIBILITIES:
A Kforce client is seeking to hire a Senior Security Solutions Architect in Pittsburgh, Pennsylvania (PA).Responsibilities include:
- Assess, design, implement, oversee the cybersecurity technology stack and supporting lifecycles
- Provide senior level support for the company's cyber security initiatives, projects, and ongoing activities
- Senior Security Solutions Architect will review existing security architecture, identify design and policy gaps, recommend security enhancements to enterprise business and process control networks
- Serve as an information security expert and trusted advisor to partners in IT and within our business units
- Lead and manage the client incident response team, comprised of in-house FTEs, and MSSP provided support
- Oversee the information security technology stack, from an infrastructure, application, and service perspective
- Senior Security Solutions Architect will engage and maintain relationships with key security vendors and resellers
- Design and implement action plans for policy creation and governance, system hardening, monitoring, incident response, operational resiliency, and defense against emerging cybersecurity threats
- Assess and guide the client IT attack surface landscape with the support of our vulnerability management team
- Senior Security Solutions Architect will partner with enterprise IT teams, compliance teams to set the direction, and remediation prioritization for discovered vulnerabilities
- Achieve security architecture compliance on requirements, including, but not limited to, Sarbanes-Oxley, NIST, global data privacy requirements, state, and federal regulations
REQUIREMENTS:
- Bachelor's degree
- Active security certification (ISACA, ISC2, CompTIA etc.), is a plus
- 10-15+ years of professional experience implementing enterprise-scale information technology solutions
- 5+ years of experience in security and network engineering and architecture
- 5+ years of relevant cyber security experience in a matrixed global environment
- Demonstrated domain expertise in security and engineering: Application security, security operations, threat detection, and/or security tooling
- Security fundamentals with a solid understanding of threats, vulnerabilities, defenses, security principles, and policies
- Strong foundation in security domains such as operational technology, next generation firewalls, intrusion detection, and vulnerability management solutions
- Deep knowledge of security frameworks e.g., MITRE ATT&CK, CIA triad, ISO 27001, CIS Top 20, NIST CSF, NIST 800-53, NIST 800-171, etc.
- Knowledge of the security ecosystem including areas such as governance, network and perimeter security, EDR/MDR, identity and access management, email security, SIEM, IDS/IPS, etc.
- Experience with penetration testing, vulnerability scanning, and web application security assessments
- Knowledge of patch management solutions and other systems security management solutions
- Knowledge of current-generation networking solution stacks, including 802.1X, SDN among others
- Multi-vendor knowledge around network security products (e.g., firewalls, SSL VPN, zero trust) and related solution sets
- Experience in securing manufacturing or operational technology environments is a plus
Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.
Recommended Skills
- Application Security
- Architecture
- Assessments
- Computer Security
- Engineering
- Governance
Browse other jobs